Sunday, 11 July 2010

Evil network: Pegashosting Network / pegashosting.com 178.162.135.0/24 (AS28753)

Hosting a very large number of sites offering fake job (such as hiring-westunion.com), Pegashosting Network of Kiev in the Ukraine uses the IP range 178.162.135.0 - 178.162.135.255, and appears to have no obvious legitimate sites whatsoever.

Part of a larger block allocated to netdirekt e. K., AS28753 has a pretty horrible reputation.Pegashosting is only a part of that though, and the main drive appears to be as a support for money mule operations and the like.

I cannot verify if the netblock WHOIS details are accurate:

inetnum:        178.162.135.0 - 178.162.135.255
netname:        Maxim-Staricin-966729
descr:          PegasHosting Network
country:        UA
admin-c:        MS20894-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
source:         RIPE # Filtered

person:         Maxim Staricin
address:        6/40 Mira str.
address:        Kiev 03134
address:        Ukraine
phone:          +380994005332
fax-no:         +380994005332
abuse-mailbox:  abuse@pegashosting.com
nic-hdl:        MS20894-RIPE
mnt-by:         NETDIRECT-MNT
source:         RIPE # Filtered

pegashosting.com was only registered in February, so hardly an old company.

Service Provided By: Center of Ukrainian Internet Names
Website: http://www.ukrnames.com
Contact: +380.577626123

Domain Name: PEGASHOSTING.COM

Creation Date: 01-Feb-2010
Modification Date: 01-Feb-2010
Expiration Date: 01-Feb-2011

Domain servers in listed order:
ns1.pegashosting.com
ns2.pegashosting.com

Registrant:
Staricin Maxim
PegasHosting.com
6/40 Mira str.
Kiev, 03134
UKRAINE
+380.994005332

Billing Contact:
Staricin Maxim abuse@pegashosting.com
Private person
6/40 Mira str.
Kiev, 03134
UKRAINE
+380.994005332

Administrative Contact:
Staricin Maxim abuse@pegashosting.com
PegasHosting.com
6/40 Mira str.
Kiev, 03134
UKRAINE
+380.994005332

Technical Contact:
Staricin Maxim abuse@pegashosting.com
PegasHosting.com
6/40 Mira str.
Kiev, 03134
UKRAINE
+380.994005332

Hosted web sites include fake pharmacies, fake job sites, hacking, porn and what appear to be fake dating sites.Blocking the entire 178.162.135.0/24 (178.162.135.0 - 178.162.135.255) will probably do you no harm.

Escrow-ento.com
Careers-kivox.com
Careers-tekset.com
Deutschenoote.com
Es-trabajowug.com
Gamestaff.org
Hat.am
Intelligentlogistics.biz
Jobs-kivox.com
Jobs-tekset.com
Kivox-careers.com
Kivox-company.com
Kivox-consulting.com
Kivox-jobs.com
Kivox-today.com
Mcashjdg.com
Mejdskas.com
Mhasdhfg.com
Mksdjhfu.com
Myasjhaa.com
Pootervom.com
Shop-n-ship.net
Tekset-careers.com
Tekset-consulting.com
Tekset-jobs.com
Tekset-news.com
Trilane-careers.com
Trilane-consulting.com
Trilane-jobs.com
Trilanecareers.com
Trilaneconsulting.com
Work-at-duolux.com
Work-at-tekset.com
Spicegrossisten.com
Spicegrossisten.org
Mlhsgdhh.com
Jacksonstatue.com
Gl-transport.com
N-transport.com
Hiring-westunion.com
Ebaysquaretrade.com
Bongblogs.net
Bonglove.net
Kydesniki.net
Love4net.net
Office-exchange.biz
Office-exchange.info
Avalonassistants.com
Bettertasks.com
Kptarnews.com
Adjustedresults.com
Resultscache.com
Mailcenter-yahoo.com
Allhdmovies.com
X-torrents.info
X-torrents.name
X-torrents.net
X-torrents.nu
X-torrents.org
X-torrents.ru
Beachamateursite.info
Hotlatinotube.info
Hotnudistmix.info
Partyhotpregnant.info
Redheadvideovideos.info
Siteblondhot.info
Todaysnewest.com
Tubegirlsexy.info
Tuberedheadnudist.info
Tuberedheadsexy.info
Wetlesbianstube.info
Big-stan.ru
Careers-at-lexor.com
Careers-stendal.com
Europe-stendal.com
Hallway-careers.com
Hallway-group-careers.com
Hallway-group-jobs.com
Hallway-jobs.com
Hallway-news.com
Hallway-today.com
Immobilie-vitrea.com
Jobs-at-stendalgroup.com
Jobs-stendal.com
Kernet.name
Lexor-careers.com
Lexor-consulting.com
Lexor-jobs.com
Lexor-sl-careers.com
Lexor-sl-consulting.com
Lexor-sl.com
Lexorsl.com
Mybisiness.org
News-stendal.com
Onlinerentalparadise.com
Silentspy.ru
Stendal-applications.com
Stendal-careers-now.com
Stendal-careers-today.com
Stendal-consulting-group.com
Stendal-consulting.com
Stendal-news.com
Stendal-today.com
Stendalcareers.com
Stendaljobs.com
Stendaltoday.com
Vitrea-arbeit.com
Vitrea-deutchland.eu
Vitrea-estate-agents.com
Vitrea-estate.eu
Vitrea-immobilie-karrieren.com
Vitrea-immobilie.com
Vitrea-karrieren.com
Vitrea-today.com
Vitrea-uk.com
Vitreaestate-europe.com
Vitreaestatecareers.com
Vitreajobs.com
Vitreanews.com
Wr-mail.ru
Arbeit-vitrea.com
Careers-at-stendal.com
Careers-at-vitrea.com
Jobs-at-hallway-group.com
Jobs-at-lexor.com
Jobs-at-stendal.com
Jobs-lexor.com
Karrieren-immobilie-vitrea.com
Karrieren-vitrea.com
Msk-guvd.org
Westunionhiring.com
Romlife.net
Mypsp.my
Qzzb.ru
Softcracks.com
Mayki.in
Sms-partner.net
Wmmailz.com
Xandgo.net
Dragporno.ru
Megaru.com
Nafani.net
Pop-banner.ru
Watchporno.ru
Xlivetv.ru
Alternativedabell.com
Alternativedago.com
Alternativedasound.com
Alternativedassound.com
Alternativedasting.com
Best-freemovie.com
Best-freemovies.com
Dasoundservices.com
Datingprivates.com
Datingteen.net
Datingteenonline.net
Datingwork.com
Free-moviebest.com
Freemoviebest.com
Fremoviesbest.com
Moviebest-free.com
Moviefree-best.com
Moviesbest-free.com
Moviesfree-best.com
Myalternativedating.com
Naebalova.net
Releaseadultsex.com
Releaseating.com
Thefreedating.com
Webalternativedating.com
Webfreeadultsexnet.com
Sportsbear.net
Tdsse.net
Qctsupport.com
Neomaks.ru
Videobum.net
Pornogandon.ru
Mp3gigant.net
Gpssystemsused.com
Mangomeds.net
Mangomeds.org
Medswhite.com
Ourmeds.org
4aclepsa.com
Medisupprt.com
Cadipll.com
Bonus-file.net
Yastreb.biz

Incidentally, I think that filing reports with abuse@pegashosting.com  would be futile and possibly counterproductive, if you do have an issue with a site on this list then email abuse:@netdirekt.de instead.

No comments: